ISC2 CISSP Practice Question

A purple team exercise is the BEST answer because it combines both offensive (red team) and defensive (blue team) capabilities in a collaborative effort. Purple team exercises involve red team members conducting attacks while blue team members actively defend and respond, with both teams sharing information and insights throughout the exercise. This approach allows for real-time feedback, immediate learning opportunities, and provides the most comprehensive view of both attack and defense capabilities simultaneously.

Red team exercises focus primarily on simulating attacks without actively involving the defensive team in a collaborative way. Blue team exercises focus on defense without incorporating active, realistic attack simulations. Compliance checks are formal reviews to ensure systems meet regulatory or policy requirements but do not involve simulated attacks or defensive responses in real-time.